Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File:                     ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier:          Cf4Kla2N9MvCuCJQyW3niPY0v7kPAzGf1L1g7YR32f0=
Subject key identifier:   40:2A:09:C0:1B:51:E1:2E:EC:B2:63:CB:05:6B:A1:41:DD:1B:78:97
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer:       /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial:       01974D44CDCC0906CF281FF7E72C0325F4FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number:          127F
Signing time:             Sun 08 Jun 2025 02:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:44 +0000
Files and hashes:         1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: iFwgle/t6okCXRRDRwdEHjxSQlHLZgnlKVaWwyLJyrM=)
                          2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:cd:cc:09:06:cf:28:1f:f7:e7:2c:03:25:f4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
        Validity
            Not Before: Jun  8 02:00:44 2025 GMT
            Not After : Jun  9 02:00:44 2025 GMT
        Subject: CN=402a09c01b51e12eecb263cb056ba141dd1b7897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:2d:09:52:cf:65:b3:82:55:a0:64:32:7f:
                    17:82:db:2c:3e:02:cf:a1:74:79:4a:39:3c:0f:06:
                    ae:df:15:8e:b2:f2:86:57:88:25:62:10:e0:97:25:
                    41:5e:2c:01:39:a5:93:46:45:92:de:a4:dd:0a:57:
                    87:f5:6e:ee:62:25:aa:f2:06:e3:e8:cb:cc:ad:22:
                    51:3e:42:01:6a:1e:a1:1e:bb:da:51:d2:b9:d1:ab:
                    f2:36:c3:e0:56:dd:08:9f:f3:d6:e4:6d:be:48:a3:
                    2f:85:0a:1c:dd:98:b1:ea:3e:64:7a:0b:94:f4:c6:
                    65:44:89:98:75:d3:38:a8:8a:d8:dd:c8:06:3a:ea:
                    8c:f0:98:2b:79:67:94:08:77:09:82:f9:d0:5a:55:
                    45:ac:8e:d0:c3:48:f2:d2:eb:cf:f7:28:c7:9e:86:
                    62:cc:29:65:99:0b:aa:d5:26:2e:2b:6f:a6:b4:cc:
                    d3:7d:d3:ad:aa:84:17:b8:56:af:59:5c:64:9e:08:
                    d1:ca:a3:e5:d0:05:e6:c6:4f:b8:4f:05:7c:76:6b:
                    97:01:d2:09:05:30:89:15:73:29:8d:c5:26:cf:0e:
                    c9:2a:f0:10:af:e8:c3:4e:c3:69:a3:e5:e2:f8:66:
                    e9:da:dd:a7:98:f4:47:ae:4b:44:7d:75:33:f1:b0:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2A:09:C0:1B:51:E1:2E:EC:B2:63:CB:05:6B:A1:41:DD:1B:78:97
            X509v3 Authority Key Identifier:
                keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:d9:d4:29:f1:e2:e0:41:c5:2e:a8:de:3d:36:14:bd:cb:
         44:12:71:7a:eb:95:c1:82:07:f9:35:13:43:e9:05:ca:c4:0a:
         f8:dd:13:97:47:d5:25:e4:58:1d:c8:88:dc:6a:dc:42:39:b4:
         4b:3b:d4:44:62:b2:ff:5b:6a:42:42:36:fb:6f:b2:e1:33:90:
         4b:af:b6:f5:24:a9:05:12:ed:80:22:3c:c5:0a:b5:6c:90:f5:
         1a:85:d8:e0:3c:39:f9:be:bc:e6:e4:27:0d:88:ee:b2:ad:44:
         83:30:43:27:95:9a:7b:06:a9:76:eb:fd:79:1c:c3:a6:1c:24:
         87:e0:cd:55:0c:32:4a:05:6a:30:6c:b3:c0:87:61:5c:6f:d0:
         ee:5f:76:7c:0a:61:4e:6b:a0:82:90:74:b2:6e:fe:ae:35:5b:
         a8:d7:8a:8a:e2:be:1d:b3:6d:f4:bf:68:c7:bd:a2:ce:d4:2a:
         83:d3:f0:57:bf:2f:d6:5c:8b:31:73:f8:d7:39:6d:ac:ed:a9:
         8f:50:6e:c0:c5:86:77:18:42:ca:8d:a2:34:99:73:93:53:62:
         ac:2a:5b:61:7d:3e:a3:77:d4:f5:2f:15:51:90:79:79:05:d6:
         c2:28:cf:a9:a8:c4:28:7b:7f:60:e0:ed:34:d5:30:4e:ef:c0:
         e4:d2:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:03 2025 by rpki-client